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(54) Downloading of applications in a digital decoder 



(57) A method for downloading an executable appli- 
cation into a decoder 1 for a digital broadcast system, 
characterised in that the application is stor^ on a port- 
able memory card introduced into a card reader 6. 7 in 
the decoder, the decoder reading and downloading the 
application from the card. Data may preferably be 
stored in the smartcard In a broadcast data format such 



as the MPEG format to permit the processing of such 
darta in the same manner as the control unit 40 of the 
decoder processes data downloading by a broadcast 
transmission. The invention extends equally to a 
decoder and a memory card for use in such a method. 
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Description 

[0(K)1] The present application relates to a method 
and apparatus for downloading executable applications 
into a decoder used in a digital broadcast system, for 
example, as used in a digital television system. 
[0002] Broadcast transmission of digital data is well- 
known in the field of pay TV systems, where scran^led 
audiovisual information is sent, usually by a satellite or 
satellite/cable linK to a number of subscribers, each 
possessing a decoder or receiver/decoder capable of 
descramtrfing the transmitted program for subsequent 
viewing, Terrestrial digital broadcast systems are also 
known. Recent systems have also used the broadcast 
link to transmit other data. In addition to or as well as 
audiovisual data, such as computer programs or inter- 
active applications to the decoder or a to a connected 
PC. 

[0003] The same decoder unit may be supplied by the 
system designer to a number of different service provid- 
ers or broadcast companies in a number of different 
countries. In such circunrotances, some degree of test- 
ing or customisatton of the decoder unit by the service 
provider will usually be necessary. Typically, a testing 
application which operates independently of the nor- 
mally installed application is used to check the con-ect 
operation of the hardware elements of the decoder, eg 
to confirm that the tuner within the decoder operates 
correctly etc. 

[0004] This operation will typically be carried out by 
the service provider or distritxitor before the decoder is 
passed to the consumer, for example, using a dedicated 
PC and a parallet or series link to the decoder. An appli- 
cation supplied by the system designer and running on 
the PC is used to adjust the operating parameters of the 
decoder. 

[0005] Depending the complexity of the operation and 
the skills of the operator employed to carry out this task 
the time necessary to test the decoder can be consider- 
alDle and can inaease the real cost of the finished item 
by a significant amount. 

[0006] Although in its t>roadest aspect the present 
invention is not limited solely to this context, it is an 
object of the present inverrtion to reduce the time and 
complexity of this type of operation and to provide a sim- 
ple means for introducing applications in the decoder. 
[0007] According to the present invention, there is pro- 
vided a method for downloading an executable applica- 
tion into a decoder, characterised in that the application 
is stored on a portatile memory card introduced into a 
card reader in the decoder, the decoder reading and 
downloading the application from the card. 
[0008] Use of a portatrfe memory card enables a pre- 
determined application to be easily and sinrply intro- 
duced into the decoder without the necessity, for 
exanple, to connect the decoder to a PC, load a testing 
program into the PC etc. The time necessary to can-y 
out the testing operation will be greatly reduced since 
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an operator can load the application into the decoder by 
a simple insertion of the card into the decoder. 
[0009] Whilst portable memory cards are known in the 
field of decoder technology, their use to date has either 

5 been restricted to the simple transfer of static data, for 
exanple, financial data from a aedit card inserted in the 
decoder, or to hold decryption keys associated with 
broadcast transmissions. Up until now, such cards have 
not been used to download executable applications. 

10 This is in part due to the perceived slowness of the data 
link associated with the use of a card slot which has 
acted to discourage system designers from this solu- 
tion. 

[0010] As will be understood, the present invention is 

15 not limited to the downloading of a testing type applica- 
tion. The card may equally be used to introduce an 
application used to initially configure the decoder. Alter- 
native uses are also imaginat^le, for example, in which 
cards bearing a promotional application such as a video 

20 game or the like, are distributed directly to the end user 
of the decoder. Increasingly, decoder units are incorpo- 
rating more and more functionalities associated with 
general multimedia products and using a portable mem- 
ory card provides a relatively simple means for a non- 
25 technical consumer to introduce executable applica- 
tions into the decoder. 

[001 1 ] The term "portable menrory card" includes any 
portable cards that may be inserted within a con-e- 
spending card slot in the decoder. The card may include 

30 a microprocessor chip in addition to a simple memory 
element. The card may be powered via a connection to 
a power source located internally within the reader slot 
of the decoder or may include a battery power source. 
[0012] In one emtxxjiment. the card may conform to 

35 the standards necessary to permit reading in a PCMC I A 
reader in the decoder. Preferably, however, the card is 
adapted to be read in a smartcard reader in the 
decoder. This solution possesses a number of advan- 
tages in conparison, for example, with a PCMCIA card, 

40 notatrfy due to the simplicity of the contacts formed on 
the card which reduces the cost of production and the 
utjiquity of smartcard readers in decoder units. 
[0013] The characteristtes of smartcards and smart- 
card readers are well known and are defined, for exam- 

45 pie. in the international standards ISO 7816_1 (physical 
characteristics), ISO 7816_2 (contact dimensions and 
placement) and ISO 781 6_3 (electrical signals and 
transmission protocols). 

[0014] Unlike, for exanple, bank cards, the snnart- 
50 cards associated with decoder units need not be fully 
inserted into the unit and may protrude some distance 
from the decoder. Consequently, whilst the card width 
and thickness may correspond to the normalised val- 
ues, the card may be longer than a standard credit card. 
55 This leads to the possibility to introduce more and larger 
conrponents onto the card. 

[0015] Advantageously, the executable application 
stored within the card and downloaded into the decoder 
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is formatted according to a broadcast data forrrat. such 
as an MPEG data format. MPEG is a well-known stand- 
ard developed for the field of digital broadcasting in 
which data is arranged into a series of tables, each table 
including a packet ID etc. In the context .of the present 
patent application, the term includes ail variants, modifi- 
cations or developments of the basic MPEG format 
such as MPEG-2 and, notably the MPEG-2 short for- 
mat. 

[0016] In practice, although the application is organ- 
ised according to the MPEG format, the data can be 
subdivided into a numt>er of modules in the memory of 
the card, the nrK)dules being downloaded and put 
together sequentially by the decoder to assemble the 
complete MPEG application. 

[0017] The advantages associated with the use of 
MPEG data are considerable, since the decoder can 
handle and process such applications in the same man- 
ner as it handles applications downloaded via the 
broadcast link. In the case, for example, where the 
decoder includes a virtual machine to process data, the 
application will be interpreted and processed by the 
same logical units within the machine as used for broad- 
cast MPEG applications. 

[0018] As will be understood, where the decoder is 
adapted to download digital broadcast transmissions 
according to an alternative data format, the same 
advantages may be obtained by organising the data in 
the card in this format. 

[(K)1 9] According to a further "prefen-ed embodiment, 
some or part of the application stored vwthin the mem- 
ory card is encrypted with one or nrrore encryption keys, 
in particular, some or part of the data stored in the 
memory card may be signed with a private key. the 
decoder having access to the equivalent public key so 
as to authenticate the origin of the application. In the 
event of non-authentication of the code, the decoder 
may refuse to download the code. Other arrangements, 
using two secret keys of a symmetric algorithm, for 
exanrrple. are possit^le in addition to or instead of this 
signing process. 

[0020] The advantage of a memory card lies in the 
simplicity in which an application may be introduced into 
the decoder. By the same token, the use of a memory 
card could potentially give rise to a problem of security 
by pernrvtting the installation of pirate applications into a 
decoder. The use of signed code ensures the integrity 
of applications within the decoder and prevents, for 
example, the introduction of a "trojan horse" program or 
the like into the system. 

[0021] Preferably the decoder is provided with a plu- 
rality of smart card readers, to permit the reading of a 
smartcard carrying the executable application together 
with another smartcard. for example, a smartcard carry- 
ing a decryption key. 

[CM)22] As mentioned above, a principal use of smart 
cards in the context of a decoder relates to the storage 
of decryption and encryption keys associated with that 



decoder. In the case where the executatjie code down- 
loaded from the memory card is partially or wholly 
encrypted, decryption will most probatrfy be carried out 
in relation to a public key stored on a subscription type 
5 smart card. A multislot decoder permits interaction 
between the two cards. 

[0023] Other embodiments for a single-slot decoder 
are possible, for example, in which the application is 
downloaded from the first smartcard and stored in a 
10 txjffer before the first card is removed and the second 
card inserted to verity the application, or in which an 
adapter is used to enatrfe both cards to be inserted in 
parallel etc. 

[0024] In one enri>odiment, the method may include 
IS the steps of downloading the application into the . 
decoder, setting one or more parameters associated 
with the application and storing the parameters in the 
memory card for later use. 

[0025] For exanple, in the case where the memory 

20 card is used as a vehicle tor a testing application devel- 
oped by the system designer, the application may 
include certain parameters, such as tuning frequency. 
vMidh are to be set by the test operator. 
[0026] The first time that the application is loaded into 

25 a decoder, the operator will have the option of selecting 
these parameters by. for example, using the remote 
controller of the decoder. Once fixed, the parameters 
can be stored on the card. Thereafter, testing of subse- 
quent decoders will be earned out automatically in rela- 

30 tion to these stored parameters. 

[0027] For reasons of security, rt is preferable that the 
application remairi unchanged and only the newly set 
parameters reloaded t>ack onto the card. The applica- 
tion may be, for example, stored in an access-restricted 

35 FLASH or ROM memory and the parameters loaded 
into an EEPROM memory unit on the memory card. 
[0028] Advantageously, the menrrary card includes a 
physical switch means for selecting one of a plurality of 
applications stored on the card that will be downloaded 

40 upon inserdon of the memory card in" the decoder. For 
example, where the card is used as a vehicle for a 
number of configuration aiDplications for a number of 
service providers, the card can include a DIL swrtoh 
means which can be set by an operator to select the 

45 configuration application associated with that service 
provider. 

[0029] The present invention extends to a decoder for 
use in a method as described above, in particular, a 
decoder adapted to read broadcast (eg MEPG) fornrwt 

50 data introduced via a card reader in the decoder. The 
present invention also extends to a memory card for use 
in such a method, in particular, including an application 
stored in a broadcast format in the card. 
[0030] Whilst the description refers to < < receiver/ 

55 decoders )) and <( decoders )) It will be understood 
that the present invention appfies equally to emlxxJi- 
ments' having a receiver integrated with the decoder as 
to a decoder unit fonctioning in combination with a phys- 
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ically separate receiver. Such a decoder may be of the 
kind used in any satellite, terrestrial, cable etc digital 
broadcast system and may include other multimedia 
type capabilities. 

[0031] Similarly, the term << executable application)) s 
covers applications vin-itten In any form of code (interpre- 
tative code, corrpiled code etc) and capable of being 
executed. 

[0032] There will now be descn'bed, by way of exam- 
ple only, a preferred embodiment of the present inven- io 
tion. with reference to the attached figures, in which: 

Rgure 1 shows an overview of the elements of a 
receiver/decoder; 

15 

Figure 2 shows a memory card, adapted to be read 
in a card reader slot in the decoder of Figure 1 ; and 

Rgure 3 shows a circuit diagram of the components 
of the card of Figure 2. 20 

[0033] Referring to Figure 1. the elements of a 
receiver/decoder 1 of set-top box for use in a digital 
broadcast system and adapted to be used in the 
present invention will now be described. As will be 25 
understood, the elements of this decoder are largely 
conventional and their inplementation will be within the 
capabilities of one skilled in the art. 
[0034] As shown, the decoder 1 Is equipped with sev- 
eral interfaces for receiving and transmitting data, in 30 
particular an MPEG tuner and demultiplexer 2 for 
receiving broadcast MPEG transmissions, a serial inter- 
face 3, a parallehnterface 4, and a modem back chan- 
nel 5 for sending and receiving data via the telephone 
network. Iii this embodiment, the decoder also includes 35 
a first and second smart card reader 6 and 7, the first 
reader 6 for accepting a sutjscription smart card con- 
taining decryption keys associated with the system and 
the second reader 7 for acc^ting bank cards and, in 
this case, a smartcard containing an application to be 40 
downloaded. 

[0035] The decoder also includes a receiver 8 for 
receiving infra-red control signals from a handset 
remote control 9 and a Peritel output 10 for sending 
audiovisual signals to a television 1 1 connected to the 45 
decoder. 

[0036] Processing of digital signals received via the 
interfaces and generation of digital output signals is 
handled by a central control unit 40. The software archi- 
tecture of the control unit within the decoder may corre- so 
spond to that ijsed in a known decoder and will not be 
described here in any detail. It may be based, for exam- 
ple, on a virtual machine interacting via an interface 
layer with a lower level operating system implemented 
in the hardware components of the decoder. In terms of 55 
the hardware architecture, the decoder will be equipped 
with a processor, memory elements such as ROM. 
RAM, FLASH memory etc. as in known decoders. 



[0037] An application introduced into the decoder cor- 
responds to a section of code introduced into the 
machine that permits the control, for example, of higher 
level functions of the machine. Thesemay include the 
generation of a graphic sequence on the screen of the 
television display in response to a command from the 
remote control, or the emission of a message via the 
modem 5 to the server associated with the digital broad- 
cast system. 

[0038] Applications may be resident applications 
stored in the ROM or FLASH of the decoder or applica- 
tions broadcast and downloaded via the MPEG inter- 
face 2 of the decoder. Applications can include program 
guide applications, games, interactive services, tele- 
shopping applications, as well as lnittatir>g applications 
to enatsle the decoder to be immediately operational 
upon start-up and applications for configuring ihe 
decoder. Applications are stored In memory locations in 
the decoder and represented as resource files compris- 
ing graphic object description files, unit files, variat^es 
block files, instruction sequence files, application files, 
data files etc. 

[0039] Conventionally, applications downloaded into 
the decoder via the broadcast link are divided into mod- 
ules, each module corresponding to one or more MPEG 
tables. Each MPEG table may be divided into a number 
of sections. For data transfer via the serial and parallel 
ports, modules are also ^Irt into tat>les arKl sections, 
tine size of the section depending on the channel used. 
As will be descrlt>ed in relation to Figure 4, a simitar sec- 
tioning is applied to MPEG tables downloaded using the 
smartcard of the present Invention. 
[0040] In the case of broadcast transmission, modules 
are transported in the form of data packets within 
respective types of data stream, for example, the video 
data stream, the audio data stream, a text data stream. 
In accordance with MPEG standards each packet is 
preceded by a Packet Identifier (PID) of 13 bits, one PID 
for every packet transported in the MPEG stream. A 
programme nrap talale (PMT) contains a list of the differ- 
ent streams and defines the corrtent of each stream 
according to the respective PID. A PID may aleri the 
device to the presence of applications in the data 
stream, the PID being identified by the PMT tatjie. 
[0041] Referring to Figures 2 and 3, the structure of a 
smartcard 12 adapted to charge an executable applica- 
tion in the decoder will now be described. Figure 2 
shows a plan view of the smartcard. comprising an area 
of contacts 13, a FLASH ROM memory 14. an EEP- 
ROM memory 15, a microprocessor 16. a DIL switch 
unit 17 and a number of other discrete components 
[0042] The memory card 2 possesses the width and 
thickness of a standard normalised smart card so as to 
enable its Insertion in a smartcard slot of the decoder. 
However, as will be seen from Figure 2. the card Is 
longer than a standard card to enable the incorporation 
of all the components described on its surface. In the 
context of Its use In the initial configuration of the 
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decoder the increase in size may not be significant. In 
alternative situations, for exanple, where the card is 
intended to be supplied to the eventual user ot the 
decoder, some components such as the DIL switch unit 
17 and EEPROM 15 may be omitted. The remaining 
components may be miniaturised and the whole card 
designed to conform with smart card norms. 
[0043] Referring now to Figure 3. the contacts 13 
engaged in the smart card reader in the decoder may 
be divided by function into a power supply line 18 which 
supplies the card voltage Vcc. a reset line 19 connected 
to the corresponding reset terminal 20 of the rnicroproc- 
essor, a clock line 21 connected to clock terminal 22 of 
the microprocessor, and an I/O line 23 connected to cor- 
responding input and output terminals 24, 25 of the 
microprocessor. As shown, connections are made via a 
series of op-amps 26. The power supply is regulated by 
means of a capacitor C4. 

[0044] The EEPROM memory unit 1 5 is connected via 
lines 27, 28 to the microprocessor 16. these lines being 
biased by the power supply Vcc connected via the 
resistances R1 and R2. The function of the EEPROM 
memory will be discussed in more detail below in rela- 
tion to the configuration application. The microproces- 
sor 16 is connected by a series of lines 29 to 
conesponding terminals of the FLASH memory 14. The 
state of three of these lines 30, 31 . 32 is determined by 
the switch unit 17 connected via a series of diodes D1, 
D2, D3 and biased by the power supply Vcc connected 
by resistances R3, R4, R5. By switching each of the so 
switches ON or OFF, a binary control vw>rd 000, 001. 
010. Oil etc can be defined. As will be discussed, this 
binary word is used to determine the first btock in the 
FLASH memory that will be accessed upon insertion of 
the card and, hence, the application that will be charged 35 
into the decoder. 

[0045] The card 1 2 is designed to engage in the credit 
card reader 7 of the decoder 1, the reader 6 being 
reserved for the sutjscription card associated virith the 
broadcast system which corrtains the keys necessary 40 
tor, inter alia, decoding scrambled transmissions and 
verifying downloaded code. Upon insertion, the reader 
checks the type of card inserted, by means of a simple 
handshake signal to the card. In tiie event that the 
reader identifies \he card as being a card of the type 4S 
containing application code tor loading into the 
machine, the decoder will access the first block of code 
in tiie FLASH memory 15 at tiie hexadecimal address 
corresponding to the binary message indicated by the 
switch unit 17. 

[0046] In the case, for example, where the card is 
intended to be used in the testing of decoders for a 
number of service providers, a different application may 
be loaded corresponding to the service provider in 
question or corresponding to the functions that need to 55 
be tested. In addition or alternatively, a first setting of 
the switches may be used to download the application 
supplied witii the card and a second to download a dif- 
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ferent application and/or associated parameters set by 
the service provider (see below). 
[0047] The application code is downloaded from the 
from the card in a series of modules, the modules then 

5 being assembled to form a series of MPEG-2 (short 
form) tables, as described above in connection witii 
broadcast data. The advantage of formatting data 
accoitjing to the MPEG format is tiiat the virtual 
machine withon the central control unit of the decoder 

10 can directly process applications received in this format, 
in the same manner as it processes applications 
received via tiie broadcast link. As will be appreciated, 
this leads to considerable reductions in the time needed 
to process the application etc, 
75 [0048] Prior to storage in the card, the application 
code contained within the MPEG tables is encrypted to 
provide a digital signature. This signature is generated 
by tiie supplier of tiie card using a private key known 
only to himself. The decoder has access to a series of 
20 public keys on a subscription card inserted in the other 
card reader. In the event that the decoder confirms tiiat 
the code has originated from a known source, by verify- 
ing the digital signature, the application will be installed 
in tiie machine. Unverified code will be rejected by the 
25 decoder. 

[0049] Other encryption techniques used in broadcast 
digital systems may also be applied, tor example, to 
encrypt the code according to one or more private keys 
known to tiie supplier of the application card to prevent 
a tiiird party from decrypting and using the application 
stored on the card. The decoder possesses the key or 
keys necessary to decrypt the code as stored on a sub- 
scription card. This encryption can be carried out in 
addition to and after tiie signature of tiie code. 
[0050] The use of a subscription card to hold the nec- 
essary decryption keys generally requires tiiat tiie 
decoder is also provided with a second smartcard 
reader, since both cards will be addressed by tie 
decoder during the downloading and verification steps. 
Alternative emtx)diments are conceivable, for example, 
in which data is first downloaded from the application 
card into a buffer, the application card removed and the 
card containing the decryption keys inserted etc. How- 
ever, as will be appreciated, these are less convenient 
than the use of a decoder equipped with two or more 
smartcard readers, particularly since one or tiie otiier of 
tine cards may need to be re-addressed at any moment. 
[0051] The installation of a test application witiiin the 
decoder will now be described. Typically, such a test 
application is used by a service provider to test the cor- 
rect operation of the hardware layer independentiy of 
tiie software that normally sits on top of the hardware 
layer. For example, the test application may control the 
tuner of the decoder to test that the decoder can cor- 
rectiy receive data transmitted on a given channel fre- 
quency 

[0052] The loaded application may be interactive so 
as to permit the operator to enter specific parameters 
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into the decoder by means of. for example, the remote 
control handset. In the case of the tuning frequency the 
operator may manually adjust the set frequency until the 
clearest reception is obtained. Once this frequency is 
known for one decoder, it will be the same for the rest of 
the series, it is therefore desirable that this and other 
parameter values can be memorised in order to avoid 
repeating the operation for each decoder. 
[0053] Accordingly, once defined by the operator in 
relation to a first decoder, these parameters are down- 
loaded into the EEPROM memory 15 of the card. Upon 
removal of the card, the operator changes the setting of 
the switches in the switch unit 17 such that an applica- 
tion at a different address within the FLASH memory wilt 
be accessed upon its next insertion in a decoder. When 
the card is then reinserted in the next in the series of 
decoders, this application will signal the presence of 
predetermined parameter values stored in the EEP- 
ROM and these values will be automatically loaded into 
and set in the decoder. In the case of the tuner, for 
example, the application ymW automatically set the tuner 
to the frequency selected the operator for the first 
decoder and the operator can then immediately deter- 
mine whether the tuner operates con-ectly or not. 
[0054] In view of the relative difficulty in writing data to 
a FLASH unit (as compared to an EEPROf^) it is prefer- 
able, though not essential, that the FLASH memory be 
used for applications that will not be nwdrfied in use and 
the EEPROM memory be reserved for data downloaded 
into the card. 

[0055] Furthermore, in order to increase the security 
of the system, the FLASH memory may be locked into a 
read-only confgoration by the microprocessor upon ini- 
tial connection of the card, and/or upon receipt of an 
unknown instruction. Otfier memory combinations and 
configurations are of course possible, using ROM 
devices etc. 

[0056] Whilst the above embodiment has been dis- 
cussed in relation to a smartcard realisation, other port- 
able memory cards, such as PCMCIA cands. may be 
used if the decoder is capable of reading such cards. 

Claims 

1. A method for dowvnloading an executable applica- 4S 
tion into a decoder, characterised in that the appli- 
cation is stored on a portable memory cand 
introduced irrto a card reader in the decoder, the 
decoder reading and downloading the application 
from the card. 

2. A method as claimed in daim 1 in which the card is 
adapted to be read, in a smartcard reader in the 
decoder. 

3. A method as claimed in claim 1 or 2 in which the 
executable application stored within the card and 
downloaded into the decoder is formatted accord- 



ing to a broadcast data fornBt. 

4. A metiiod as claimed in claim 3 in which the execut- 
able application stored witiiin the card and down- 

? loaded into the decoder is forn^tted according to 

an MPEG data format 

5. A method as claimed in claim 4. the application 
being subdivided into a plurality of modules in tiie 

0 memory of the card, tiie modules being down- 
loaded and put together sequentially by the 
decoder to assemble the complete MPEG applica- 
tion. 

5 6. A metiiod as claimed in any preceding claim, in 
wfTtch some or part of tiie application stored within 
tfie memory card is encrypted with one or more 
encryption keys. 

> 7. A method as claimed in any preceding claim in 
which some or part of tiie data stored in tiie mem- 
ory card has been signed with a private key, tiie 
decoder having access to tiie equivalent public key 
so as to auttierrticate tiie origin of ttie application. 

8. A metiiod as claimed in any preceding claim in 
which the decoder is provided with a plurality of 
smart card readers, to permit reading of a smart- 
card carrying tiie executat>le application and 
another snnartcard. 

9. A metiiod as claimed in any preceding claim includ- 
ing tiie steps of downloading tiie application into tiie 
decoder, setting one or more parameters associ- 
ated with tiie application and storing the parame- 
ters in the memory card for later use. 

10. A metiiod as claimed in any preceding claim in 
which the card includes a physical switch means for 
selecting one of a plurality of applications stored on 
the card tiiat will be downloaded upon insertion of 
the memory card in the decoder. 

11- A decoder for use in a metiiod as claimed in any 
preceding daim. 

12. A decoder as claimed in daim 1 1 adapted to read 
broadcast format data introduced via a card reader 
in the decoder. 

13. A memory card for use in a method as claimed in 
any of claims 1 to 10. 

14. A memory card as claimed in claim 13 including an 
application stored in a broadcast data format in the 
card. 
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